add-provider
Pass
Audited by Gen Agent Trust Hub on May 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a Python script
scripts/add_provider.pywhich uses the standard library to perform HTTP requests to the Bolna API. - [DATA_EXFILTRATION]: The skill is designed to transmit provider credentials to the Bolna infrastructure at
https://api.bolna.ai. This behavior is the primary stated purpose of the skill and targets the vendor's own API. - [CREDENTIALS_UNSAFE]: While the skill manages credentials, it correctly instructs the use of environment variables (
BOLNA_API_KEY) and explicitly warns against committing secrets to files.
Audit Metadata